Reports

This report shows the trends regarding Data Protection Impact Assessments (DPIA) in EU institutions, bodies, offices and agencies and puts forward some conclusions.

The report relates to DPIAs on data processing operations involving administrative data. It does not cover DPIAs conducted by EUIs active in the Area of Freedom, Security and Justice, in particular Europol, Eurojust and the EPPO, when they carry out activities within the scope of judicial cooperation in criminal matters and police cooperation.

On 3 October 2024, the European Union Agency for Cybersecurity (ENISA) and the European Data Protection Supervisor (EDPS) jointly organised a table-top exercise titled “Personal Data Breach Awareness In Cybersecurity Incident Handling” (PATRICIA). The event, hosted at the EDPS premises in Brussels, aimed to raise awareness among staff from European Union Institutions, Bodies, and Agencies (EUIs) on managing personal data breaches.

A Comprehensive Initiative to Strengthen Compliance on Personal Data Breach Management.

In 2024, the European Data Protection Supervisor (EDPS) launched a dedicated campaign to raise awareness of personal data breaches, one of 20 initiatives organised to mark the institution’s 20th Anniversary. The campaign ran from March to October 2024, 

TechSonar report 2024-2025 explores six emerging technologies: Retrieval-augmented generation (RAG), On-device AI, Machine unlearning, Multimodal AI, Scalable oversight and Neuro-symbolic AI. 

The EDPS publishes the results of its survey on the role, responsibilities and tasks of data protection officers in the EU institutions, bodies, offices and agencies (EUIs). The outcome of the survey demonstrates a high level of awareness and compliance of EUIs with data protection officers’ advice. The press release is available here.